Learn security best practices

I frequently come across technical posts highlighting how a specific rule on the firewall caused a hack or how account permissions were misused and other ancillary issues. What are your go to security best practices for OS, network and cloud? A lot of it is indeed common sense but where can I read more and develop that security mindset.

account best practices cloud common sense cybersecurity firewall go to hack indeed learn lot network permissions posts practices security technical